$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/364d44a2-e208-407d-b17b-90406e33b484.roa File: 364d44a2-e208-407d-b17b-90406e33b484.roa (raw, json) Hash identifier: R0MVpc5yP5uk7zw0iXSw3vDJa5Enu0hHVa8yr5nWm2I= Subject key identifier: 4D:7E:83:49:2E:4C:0B:07:B2:37:43:52:AC:FA:82:9A:10:18:3C:D0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4207BD4FD112DAA83CB0C66B92AC8E4CC7BAC00B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/364d44a2-e208-407d-b17b-90406e33b484.roa Signing time: Thu 30 Oct 2025 22:37:02 +0000 ROA not before: Thu 30 Oct 2025 22:37:02 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ed4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:07:bd:4f:d1:12:da:a8:3c:b0:c6:6b:92:ac:8e:4c:c7:ba:c0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:37:02 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=8d3b13ea50d06da5696dc40a981f3e9c4a85533a2b97188fedb6a44a328b4784, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:23:08:fd:08:4d:60:f9:3b:59:61:ef:68: 06:9e:c4:4a:78:86:ee:b3:7d:d1:1d:1b:5f:7c:7a: 8c:c0:3d:1d:e0:02:b3:71:47:7e:eb:4d:48:60:7d: 75:30:94:34:e6:28:9e:5c:0b:49:d6:92:13:09:91: a8:dc:18:5d:03:c4:f0:75:38:1e:7f:c7:d1:c9:42: c3:69:c8:34:fe:e5:ae:99:08:0b:96:1f:8b:cd:1d: 9e:de:cb:67:74:3e:c0:5a:d4:a3:0a:32:35:80:de: a7:52:37:58:a4:78:e6:8d:27:ce:fa:09:1e:79:81: d6:9a:e5:a1:08:f7:ba:b0:1b:7d:e4:18:00:09:3e: 8a:c1:22:11:ef:0d:db:c1:54:7a:38:61:ff:88:30: 18:bf:ee:7f:98:87:1d:17:bf:6a:d3:1c:d6:53:ac: 2d:a3:5e:3e:9e:ad:e6:bc:ec:6b:48:1e:69:d1:5e: 67:48:f9:a7:ea:c9:13:58:44:36:d3:bc:4e:d2:ed: 7e:e5:cb:b4:87:f9:e2:7c:6c:03:91:c3:c5:96:15: 2d:9b:30:7a:71:72:84:28:8a:d4:07:d6:cb:ca:af: 13:d4:1c:28:51:c6:2a:5f:30:c4:d3:ae:5c:b1:89: a9:f6:db:09:aa:aa:2f:1e:9a:fd:8b:a3:52:1d:31: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7E:83:49:2E:4C:0B:07:B2:37:43:52:AC:FA:82:9A:10:18:3C:D0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/364d44a2-e208-407d-b17b-90406e33b484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ed4::/47 Signature Algorithm: sha256WithRSAEncryption 5a:d6:79:d1:f6:e0:d4:c5:5e:e4:9e:7a:a4:ec:61:8c:06:9f: 79:63:78:dc:78:4f:5e:7b:95:66:84:94:6e:df:7e:76:fb:d9: 46:ec:76:7e:87:45:fa:97:1c:13:d1:10:de:c0:03:49:f7:bc: 8e:99:9c:1e:1e:bb:8f:3b:8d:9d:99:b2:7b:19:ec:35:db:3d: 74:0b:63:61:7b:99:a1:d1:75:f8:a3:41:67:1d:b3:27:a5:40: f8:e8:1a:c1:54:e8:bf:f4:4c:b9:38:c4:9f:aa:ec:b4:0b:fd: 79:a0:00:2e:35:12:1a:84:1f:15:75:e2:97:6e:69:81:0c:55: c6:65:ca:13:d8:c3:39:d0:27:ff:6b:4d:ea:86:a8:e0:65:b3: ff:81:48:fa:a7:b1:2b:b0:28:19:a3:c3:72:a8:0d:98:d1:93: dc:21:84:b9:9d:e8:58:0b:5a:a9:80:74:09:cf:d0:e4:35:ac: 68:1d:37:36:f5:16:92:39:21:36:ef:bd:a6:24:9f:b8:7e:63: de:9c:be:5e:6f:00:da:b4:72:f5:5e:e6:d7:75:88:f2:63:77: 75:ad:90:b9:27:26:10:31:d2:7e:7e:5a:44:2b:f6:cc:4f:1d: 3f:fc:be:c2:2f:9a:ea:41:99:dc:7a:dd:63:75:b5:29:23:53: b1:fb:f2:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQge9T9ES2qg8sMZrkqyOTMe6wAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIzNzAyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDNiMTNlYTUwZDA2ZGE1Njk2ZGM0MGE5ODFmM2U5YzRh ODU1MzNhMmI5NzE4OGZlZGI2YTQ0YTMyOGI0Nzg0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZByMI/QhNYPk7WWHvaAaexEp4hu6zfdEdG198eozAPR3g ArNxR37rTUhgfXUwlDTmKJ5cC0nWkhMJkajcGF0DxPB1OB5/x9HJQsNpyDT+5a6Z CAuWH4vNHZ7ey2d0PsBa1KMKMjWA3qdSN1ikeOaNJ876CR55gdaa5aEI97qwG33k GAAJPorBIhHvDdvBVHo4Yf+IMBi/7n+Yhx0Xv2rTHNZTrC2jXj6erea87GtIHmnR XmdI+afqyRNYRDbTvE7S7X7ly7SH+eJ8bAORw8WWFS2bMHpxcoQoitQH1svKrxPU HChRxipfMMTTrlyxian22wmqqi8emv2Lo1IdMSqfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTX6DSS5MCweyN0NSrPqCmhAYPNAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM2NGQ0NGEyLWUyMDgtNDA3ZC1iMTdiLTkwNDA2ZTMzYjQ4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAHtQwDQYJKoZIhvcNAQELBQADggEBAFrWedH24NTFXuSeeqTsYYwG n3ljeNx4T157lWaElG7ffnb72Ubsdn6HRfqXHBPREN7AA0n3vI6ZnB4eu487jZ2Z snsZ7DXbPXQLY2F7maHRdfijQWcdsyelQPjoGsFU6L/0TLk4xJ+q7LQL/XmgAC41 EhqEHxV14pduaYEMVcZlyhPYwznQJ/9rTeqGqOBls/+BSPqnsSuwKBmjw3KoDZjR k9whhLmd6FgLWqmAdAnP0OQ1rGgdNzb1FpI5ITbvvaYkn7h+Y96cvl5vANq0cvVe 5td1iPJjd3WtkLknJhAx0n5+WkQr9sxPHT/8vsIvmupBmdx63WN1tSkjU7H78u8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:01 2025 by rpki-client